$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9798c8c-2ea0-3b2b-afe2-f1db7e40ba29.roa File: c9798c8c-2ea0-3b2b-afe2-f1db7e40ba29.roa (raw, json) Hash identifier: 6Ao7Hf6ewtwXzPYREXall6pW8cWtyRytXFHOvDa8dCk= Subject key identifier: 3B:AE:16:DF:B1:BA:49:B3:F8:F3:F4:FB:52:DB:B9:A9:C7:2E:E5:E9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F31B7C69883FD842A59CE7E40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9798c8c-2ea0-3b2b-afe2-f1db7e40ba29.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.33.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c6:98:83:fd:84:2a:59:ce:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=96d67d32-2b03-45ae-8435-fe560593905a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:49:55:8c:4d:1f:ca:8f:b1:bc:60:45:b6:f5: fa:78:8c:95:ae:f5:5a:da:08:aa:47:10:b1:5f:bc: af:1e:85:5a:7f:52:3c:02:11:c0:8d:73:e8:6c:4a: 9d:c2:b6:17:2f:d5:82:6b:54:74:66:da:1c:e1:8e: 65:52:a1:5e:8b:38:36:0b:01:b5:0e:3d:e7:52:02: 77:db:d3:e4:74:a3:a7:8c:6d:30:5f:78:d8:01:06: 0e:e2:e0:91:53:7f:55:0f:10:07:83:b3:04:d3:66: 04:7d:9b:64:14:30:a5:2e:17:18:63:a9:3f:45:50: ba:19:f6:03:00:2a:f6:55:20:ac:3c:f8:b6:38:5c: c7:b7:dd:4b:65:e5:f7:1d:c8:c3:32:08:e4:34:79: 13:cb:67:39:11:bb:89:4a:c4:7d:f2:b0:d1:3e:92: 85:a0:7a:02:48:3f:a1:c1:05:7a:63:11:d6:f5:0a: 41:9a:92:57:0f:7b:b8:31:ce:c5:18:75:dc:b0:f9: e7:54:4b:ad:16:f2:e7:88:e8:d5:1d:a2:63:12:0c: 42:e0:a9:4e:35:6d:61:f4:ef:70:2d:88:a1:c4:50: b8:64:4a:48:8e:0c:c4:13:a2:02:28:5d:33:0a:3e: 97:1b:58:6b:86:dc:87:9c:93:58:95:ef:09:80:50: d2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AE:16:DF:B1:BA:49:B3:F8:F3:F4:FB:52:DB:B9:A9:C7:2E:E5:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c9798c8c-2ea0-3b2b-afe2-f1db7e40ba29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:2b:da:a2:05:91:cc:f9:20:b2:b1:b6:a7:a6:d5:1d:45:3b: 50:96:09:86:7f:af:b3:3d:12:9b:98:97:a3:e6:ac:51:60:b8: 83:df:47:2d:0c:0a:7b:80:98:6b:47:1c:8d:ca:1a:e8:9b:68: 06:0b:b4:88:19:f4:1f:16:a2:5c:c3:f0:5e:c9:86:06:76:0b: df:10:d3:9d:9a:23:1a:8b:82:14:ae:b1:a4:1c:2f:7b:b5:cf: 49:5f:f4:c6:99:c8:e4:30:06:c8:86:50:86:cd:7e:2e:1c:e5: a4:9c:fa:6b:2a:39:bf:e7:12:b4:a3:16:58:e0:8a:a2:ac:ee: 0c:42:d4:7f:0d:a1:c3:a4:c8:fa:29:1a:f1:78:4e:17:75:66: de:bb:77:31:25:19:48:a9:4d:f0:5a:34:d6:7e:20:42:2b:4b: aa:02:25:a3:30:5c:d5:df:08:9e:98:c4:37:10:29:d5:ec:94: da:de:ff:85:67:e1:16:29:f7:f8:a1:d0:ad:88:fd:41:41:81: cb:27:0b:b0:fc:2f:51:24:61:c2:44:82:27:46:fa:7e:6c:33: 92:32:e9:2b:89:42:c4:e5:13:f9:c9:0b:12:8d:05:05:38:34: 9f:59:c5:89:a7:68:a3:fc:38:fe:6d:17:56:61:59:6e:ab:e6: c7:46:b5:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8aYg/2EKlnOfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk OTZkNjdkMzItMmIwMy00NWFlLTg0MzUtZmU1NjA1OTM5MDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0lVjE0fyo+xvGBFtvX6eIyVrvVa2giqRxCx X7yvHoVaf1I8AhHAjXPobEqdwrYXL9WCa1R0Ztoc4Y5lUqFeizg2CwG1Dj3nUgJ3 29PkdKOnjG0wX3jYAQYO4uCRU39VDxAHg7ME02YEfZtkFDClLhcYY6k/RVC6GfYD ACr2VSCsPPi2OFzHt91LZeX3HcjDMgjkNHkTy2c5EbuJSsR98rDRPpKFoHoCSD+h wQV6YxHW9QpBmpJXD3u4Mc7FGHXcsPnnVEutFvLniOjVHaJjEgxC4KlONW1h9O9w LYihxFC4ZEpIjgzEE6ICKF0zCj6XG1hrhtyHnJNYle8JgFDS7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuuFt+xukmz+PP0+1LbuanHLuXpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzk3OThjOGMtMmVhMC0z YjJiLWFmZTItZjFkYjdlNDBiYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsr2qIFkcz5ILKxtqem1R1FO1CWCYZ/r7M9EpuYl6PmrFFguIPfRy0M CnuAmGtHHI3KGuibaAYLtIgZ9B8WolzD8F7JhgZ2C98Q052aIxqLghSusaQcL3u1 z0lf9MaZyOQwBsiGUIbNfi4c5aSc+msqOb/nErSjFljgiqKs7gxC1H8NocOkyPop GvF4Thd1Zt67dzElGUipTfBaNNZ+IEIrS6oCJaMwXNXfCJ6YxDcQKdXslNre/4Vn 4RYp9/ih0K2I/UFBgcsnC7D8L1EkYcJEgidG+n5sM5Iy6SuJQsTlE/nJCxKNBQU4 NJ9ZxYmnaKP8OP5tF1ZhWW6r5sdGtVA= -----END CERTIFICATE-----Generated at Wed Sep 23 20:35:09 2026 by rpki-client